CVE-2018-12900

high

Description

Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.

References

http://bugzilla.maptools.org/show_bug.cgi?id=2798

https://access.redhat.com/errata/RHSA-2019:2053

https://access.redhat.com/errata/RHSA-2019:3419

https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-12900

https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html

https://usn.ubuntu.com/3906-1/

https://usn.ubuntu.com/3906-2/

https://www.debian.org/security/2020/dsa-4670

Details

Source: MITRE

Published: 2018-06-26

Updated: 2021-03-05

Type: CWE-787

Risk Information

CVSS v2

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 2.8

Severity: HIGH